Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          fzdKXsARpdX488FWgMH6HIWiZvG17wK82i9wd5axB9o=
Subject key identifier:   AA:89:5B:A1:62:EA:B2:8B:9C:21:59:8D:C8:AA:58:23:73:F0:8A:12
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       01974A439B48774FB8EAE66AEB8DF7C9B423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          1485
Signing time:             Sat 07 Jun 2025 12:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:33 +0000
Files and hashes:         1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: RwvshwtrPn/lTDJ2bfXqHJyU6Q520mEdLwrslVYMCvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:9b:48:77:4f:b8:ea:e6:6a:eb:8d:f7:c9:b4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Jun  7 12:00:33 2025 GMT
            Not After : Jun  8 12:00:33 2025 GMT
        Subject: CN=aa895ba162eab28b9c21598dc8aa582373f08a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:dc:2e:e7:d8:fa:d3:ef:32:97:c1:19:37:
                    68:b7:f2:4c:5c:ed:8f:cb:a5:a8:5d:4c:aa:a4:99:
                    c8:cb:48:aa:c6:a1:3f:00:d8:c1:b2:6e:49:ea:9c:
                    84:70:dc:a5:2a:66:d8:50:50:fc:f7:eb:f0:a4:2f:
                    74:57:4f:01:b4:fe:bb:a1:49:56:b6:a1:57:5d:b0:
                    68:5e:59:97:9d:05:ae:ef:77:2b:ff:33:c2:5b:9a:
                    8f:1d:23:72:b4:be:ef:4f:6a:61:ae:15:ae:55:ee:
                    0e:05:e3:6f:ef:a6:13:e4:b7:e6:ca:db:78:6a:7d:
                    2e:99:f4:bf:84:4c:ea:78:5d:ab:5c:7c:76:ce:c5:
                    fb:ac:bb:f7:59:17:cd:ec:6a:e7:6d:70:74:1e:89:
                    08:55:34:58:8a:23:aa:fe:cb:4d:8f:85:d0:35:1b:
                    70:b3:31:c4:69:f2:af:6c:fa:ef:cb:b2:a7:60:93:
                    5a:9e:ad:9f:9c:51:8b:59:81:ac:3d:1e:23:ee:35:
                    d2:9f:15:6b:b7:b0:0d:dd:46:1a:d5:b8:df:f3:d2:
                    fe:e2:a3:72:b0:05:2e:ec:6f:3b:e1:b3:4c:53:e1:
                    66:a8:f9:1e:ca:35:68:ef:66:d3:15:b0:1b:b0:dd:
                    f8:15:6e:b0:d7:b8:90:f6:11:d8:61:0c:86:28:02:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:5B:A1:62:EA:B2:8B:9C:21:59:8D:C8:AA:58:23:73:F0:8A:12
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:bc:63:3b:19:70:9a:a2:2f:e9:d4:0f:26:23:92:a4:ab:
         d2:84:db:23:93:a1:25:a0:97:81:b5:33:9d:6d:53:8b:f1:c2:
         13:2a:03:c8:1a:f0:8b:2d:c6:f2:36:9d:ad:b7:d7:21:91:c6:
         97:2d:c3:46:c8:47:7e:82:35:96:cd:8f:59:e3:9f:c1:13:46:
         bd:93:0b:75:58:51:92:ef:d9:44:86:52:84:a1:5d:e8:5f:b9:
         5e:4f:2c:6f:a4:21:15:f8:3e:1c:bf:86:76:29:c6:f5:1f:27:
         fa:fb:c4:f5:5a:79:c5:d6:c7:a8:c1:90:54:d8:00:fc:cc:37:
         f2:ba:91:d8:73:30:c2:da:b9:19:b0:5c:a9:d2:56:c8:f8:d4:
         d2:5a:11:7c:e7:4c:eb:20:c2:eb:f3:30:1e:e1:d1:5a:be:5f:
         74:4d:57:ba:84:77:0c:7b:fb:2b:da:44:7e:7e:c9:71:a1:b9:
         39:f5:d1:c7:ad:38:94:90:66:2b:99:14:46:c7:70:8a:0e:cd:
         da:fa:cf:0b:ff:4d:a8:b6:e4:59:b7:71:9a:da:8b:42:8e:33:
         54:12:c9:89:95:0d:3c:ce:cd:9f:bf:ec:3a:5f:53:26:9d:15:
         b2:1c:27:57:5e:72:b2:e0:fd:72:cb:d4:0b:93:b6:6f:75:9d:
         75:36:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:58:15 2025 by rpki-client